smartiolabs

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

smartiolabs records in CISA KEV

No smartiolabs vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-26221 CVE-2025-39479 · GHSA-cx64-2338-wf6w

WordPress Smart Notification Plugin <= 10.3 - SQL Injection vulnerability

MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in smartiolabs Smart Notification allows Blind SQL Injection.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00398 Published 2025-06-17 No fix listed CWE-89

TI-2025-26220 CVE-2025-39478 · GHSA-34w9-337w-mx68

WordPress Smart Notification Plugin <= 10.3 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in smartiolabs Smart Notification allows Reflected XSS.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00252 Published 2025-06-27 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0